Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qv6f-vv52-ch9r

Опубликовано: 05 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

EPSS

Процентиль: 37%
0.00152
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

CVSS3: 6.5
nvd
около 2 лет назад

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

CVSS3: 6.5
debian
около 2 лет назад

When Firefox is configured to block storage of all cookies, it was sti ...

CVSS3: 6.5
fstec
около 2 лет назад

Уязвимость локального хранилища (localstorage) браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

suse-cvrf
около 2 лет назад

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

EPSS

Процентиль: 37%
0.00152
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862